by Kastro CVE-2022-27518 · Citrix Citrix Gateway, Citrix ADC
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 597 of 786
Citrix
mitre
CVE-2022-38488 · mitre
logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.
CVE-2022-46071 · mitre
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page.
CVE-2021-33420 · mitre
A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializ…
CVE-2022-46609 · mitre
Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain…
CVE-2022-46996 · mitre
vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package.
CVE-2022-45969 · mitre
Alist v3.4.0 is vulnerable to Directory Traversal,
CVE-2022-46072 · mitre
Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.
CVE-2022-46997 · mitre
Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package.
CVE-2022-31358 · mitre
A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute ar…
CVE-2022-44236 · mitre
Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 (20181130-16:12) has a Weak password vulnerability.
CVE-2022-44832 · mitre
D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function.
CVE-2022-45005 · mitre
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.
CVE-2022-46631 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the s…
CVE-2022-46634 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the s…
CVE-2022-46404 · mitre
A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R…
CVE-2022-46393 · mitre
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0.
CVE-2021-39426 · mitre
An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 p…
CVE-2022-40004 · mitre
Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted URL to the Audit…
CVE-2022-47406 · mitre
An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for T…
CVE-2022-47408 · mitre
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.…
CVE-2022-47409 · mitre
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.…
CVE-2022-47410 · mitre
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.…
CVE-2022-47411 · mitre
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.…
Unknown
CVE-2022-3900 · Unknown Cooked Pro
Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection
CVE-2022-3921 · Unknown Listingo
Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload
CVE-2022-3982 · Unknown Booking calendar, Appointment Booking System
Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
CVE-2022-3915 · Unknown Dokan
Dokan < 3.7.6 - Unauthenticated SQLi
google_android
Apache Software Foundation
CVE-2022-46364 · Apache Software Foundation Apache CXF
Apache CXF SSRF Vulnerability
Apple
GitHub
CVE-2022-46255 · GitHub GitHub Enterprise Server
Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE
vmware
SAP
CVE-2022-41272 · SAP NetWeaver Process Integration
An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search (UDS) of SAP…
CVE-2022-41267 · SAP BusinessObjects Business Intelligence Platform
SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Bu…
CVE-2022-41271 · SAP NetWeaver Process Integration
An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration…
Siemens
TIBCO Software Inc.
CVE-2022-41561 · TIBCO Software Inc. TIBCO JasperReports Server
TIBCO JasperReports Server RCE Vulnerability
Daikin
Delta Electronics
CVE-2022-2660 · Delta Electronics Industrial Automation DIALink